SALT has to be secret